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CLAIMS 

1 . Method for executing a security critical activity in a se- 
curity device, wherein the security critical activity is executed 
with user involvement, comprising the steps of 

i) starting the execution of an action of a security critical 
activity, 

ii) checking if this action, under the. present situation, can 
be handled by a proxy letter or if it shall be handled by a 
user, and if the action can be granted by either the proxy 
letter or the user, 

iii) continuing and ending the . execution of the action, and 

iv) repeating steps i) to iii) until all actions of the secu- 
rity critical activity have been executed or else 

v) stop the Execution of the security critical activity. 

2. Method according to claim 1, further comprising the step 
of, in the proxy letter, define under which situation or situa- 
tions each proxy letter is allowed to handle actions. 

3. Method according to claim 2, wherein the definition in the 
proxy letter defines under what situations the proxy letter is 
allowed to grant aations. 

4. Method according to claim 2 -eir— 3, wherein the definition in 
the proxy letter further defines under what situations the proxy 
letter is allowed to\ prevent actions from being executed. 

5. Method according to^ &rr^oT~ cldiius -- l-4 , wherein the step of 
checking if the situation/action can be granted further comprises 
the steps of \ 

reading the proxy letters and see if any proxy letter is 
allowed to grant the situation/action and if not 
requesting the user to grant the action. 



6. Method according to claim 5, further comprising the step of 
checking if any proxy letter is allowed to prevent the ac- 

tion/situation\ f rom being executed and stop executing if there is 
such an action/situation . 

7. Method according to claim 5, wherein the step of requesting 
the user to grant the action further comprises the steps of 

asking the user to grant the action, 

waiting a predetermined period of time to receive a reply 
granting the action.! 

8. Method according to any of Lire prccer dlTrg^cl^rMftS, wherein 

\ 

the step of ending the execution of the action comprises the step 
of logging if the pro^W letter or the user granted the situa- 
tion/action. \ 

9. Method according to any of claim 3 - t o " ft, wherein the defi- 
nition of situations/actiions which the proxy letter is allowed to 
grant comprises only the\ definition of less security critical ac- 
tions, \ 



